11 June 2026
Morning assurance contributions and afternoon AI security contributions are presented and discussed in Sapanca.
Event record / ASF 2026
ASF 2026.
Event record
From the forum to working publications: evidence-based assurance and vulnerability management in an AI era.
After-event video
The day, in 4:14.
Four minutes of conversations, perspectives and the day in Sapanca.
English captions are automatically generated and not human-certified. Read the transcript
The day
Two tracks, one question.
How can trust be shown with evidence: first for assurance, then for vulnerability management once AI changes the pace.
Assurance
Six specialist contributions and an executive panel followed the assurance question from incident evidence to engineering transparency.
- 09:00Opening Remarks
- 09:10Cybersecurity Incident Analysis
- 09:30National Certification in Practice
- 09:50International Cybersecurity Standards & Certification
- 10:10Coffee Break
- 10:25National Security Frameworks and Certification Schemes
- 10:45Transparency & Security Centre Models
- 11:05Cybersecurity Maturity Landscape
- 11:25Panel Discussion followed by Closing Remarks
AI security and vulnerability management
The afternoon examined how AI changes attack, discovery and defence.
- 12:00Networking Lunch
- 13:45Afternoon Keynote
- 13:55AI Security Risk Governance Latest Trends in
- 14:15Vulnerabilities and Security Standards in the AI Era
- 14:35AI Productivity Meets Software Trust, Security
- 14:55AI-Era Vulnerability Management Framework Launch
- 15:15Panel: Building Trustworthy Rules for the AI Era
- 15:45Tea Break & Networking
- 16:00Impact of the AI era on vulnerability scanning and solutions
- 16:20AI-Powered Vulnerability Discovery & Remediation
- 16:40AI-Era Vulnerability Management: From Passive to Proactive
- 17:00European Perspectives on AI Security From Research to Regulation
- 17:20Vulnerability discovery and penetration in the AI era
- 17:40Panel: Building AI Security Ecosystem Collaboration
- 18:10Closing Remarks
Published programme · local event time. Times are local to Sapanca, Türkiye, on 11 June 2026.
What the forum surfaced
Themes, not transcripts.
Public themes drawn from the two final publications. They are not attributed to any speaker or organisation.
Assurance
- 01
Incidents start inside
Technical weaknesses and governance gaps together account for about seventy per cent of incident drivers; two of the largest recent outages involved no attacker at all.
- 02
Sovereignty through control
France’s SecNumCloud meets its sovereignty goals through testable technical requirements: control matters more than country of origin.
- 03
Only evidence travels
When results are portable, verifiable, comparable and independent of the laboratory, a product can be tested once and trusted in many markets.
- 04
Capability is the constraint
The practical problem is not a lack of requirements but systems and controls that exist on paper without being used.
- 05
Transparency works, at a cost
Deep engineering transparency has worked in production, but it is costly and depends on real preconditions.
Vulnerability management in an AI era
- 01
A dual response
Combine exposure prevention (governance, standards, secure design) with exposure reduction (faster detection, prioritisation, patching, automated countermeasures).
- 02
Managing report volume
AI helps triage the rising volume of vulnerability reports, but findings still need careful human filtering.
- 03
Joint defence
No single entity can defend against AI-driven attacks in isolation; vendors, operators and the wider ecosystem must collaborate.
- 04
Guardrails and AI firewalls
Because large language models are probabilistic, independent guardrails and a dedicated AI security control layer are needed.
- 05
Human accountability
Asset identification, risk assessment, patch approval and final governance decisions stay under human oversight.
“Assurance is defined by what is tested, not by who makes the product.”Quoted in the Assurance Manual, section 1 · speaker not named
From event to publication
How the day became two documents.
The publications are not minutes. They are syntheses prepared by Global Digital Foundation from the forum evidence and wider industry perspectives.
Assurance Manual
The morning evidence supports a risk-based, evidence-centric approach. The four-level assurance ladder was not proposed at the forum; it is a synthesis offered as a considered contribution.
AI-era Vulnerability Management
The forum did not aim to agree a formal framework. The paper offers an initial contribution to the discussion, intended to invite further input.
Working groups and plans
Two working groups carry the themes forward between gatherings. Taking the work to HCE, a Blueprint around MWC 2027 and ASF 2027 in France are planned.
AI Security Forum
Final publicationAssurance ManualASF 2026 · PDF 1.5 MB
Final publicationAssurance ManualASF 2026 · PDF 1.5 MB
Outcome · morning track
Assurance You Can Evidence
A practical approach to trust grounded in evidence: define what is being assured, make the evidence inspectable, and sustain assurance through the system lifecycle.
AI Security Forum
Final publicationAI-era Vulnerability ManagementASF 2026 · PDF 1.5 MB
Final publicationAI-era Vulnerability ManagementASF 2026 · PDF 1.5 MB
Outcome · afternoon track
AI-era Vulnerability Management
A working framework for vulnerability discovery, validation and response in an AI era, with risk-based prioritisation, human oversight and service continuity.
Participant feedback
What respondents said.
Aggregate results of the voluntary post-event survey. They describe the respondents, not all participants.
Topics respondents selected
- 20 of 28 respondents · 71.4%AI vulnerability management
- 19 of 28 respondents · 67.9%AI-powered proactive defense
- 17 of 28 respondents · 60.7%Ecosystem collaboration
28 voluntary responses from 58 participants. Multiple selections allowed for topics; percentages describe respondents, not all participants. No individual responses or contact details are published.
Sources
What this recap rests on.
The two final publications, the published programme and the after-event video.
- Final publicationAssurance You Can Evidence · September 2026
- Final publicationAI-era Vulnerability Management · September 2026
- Published programmeASF 2026 agenda · local event time
- Survey aggregatesn=28 of 58 participants
- After-event videoASF 2026 recap film · 4:14